2026-07-05T17:38:04Zhttps://www.radar-service.eu/oai/OAIHandler

10.35097/prcfrppz0c1f1e282026-07-01T09:24:49Zradar4kit

10.35097/prcfrppz0c1f1e28 Fruböse, Clemens Clemens Fruböse 0009-0003-0438-6545 Karlsruhe Institute of Technology Fruböse, Clemens 2025-2026 2026 Information Technology IEC 61850 IEC/IEEE 61850-9-3 IEC 61850-9-2 Precision Time Protocol (PTP) Sampled Values (SV) GNSS spoofing Digital substation cybersecurity Time Synchronization IEC 61869-9 network capture of IEC 61850 Sampled Values, Precision Time Protocol and GOOSE messages Open Access Creative Commons Attribution Non Commercial 4.0 International Karlsruhe Institute of Technology https://ror.org/04t3en479 Fruböse, Clemens 0009-0003-0438-6545 Karlsruhe Institute of Technology Seiquera, John Karlsruhe Institute of Technology During GNSS attacks on a time server in an electrical substation, the time service is affected and, accordingly, time-critical protection functions can misoperate. In our threat model, these trips are maliciously triggered via time synchronization attacks (using the so-called two-clock GNSS attack). These data show how IEC 61850 Sampled Values, IEEE 1588 Precision Time Protocol, and GOOSE traffic behave under these attacks, with GOOSE messages proving the misoperation of the differential protection IED. This is the complementary dataset for the paper: "Malicious GNSS Spoofing Causing False Trips in IEC 61850 Multivendor Substations" by Fruböse et al. (2026). This work was funded by the Topic Engineering Secure Systems of the Helmholtz Association (HGF) (POF IV, LK 01, 46.23.02) and supported by KASTEL Security Research Labs, Karlsruhe. Payload which discloses vendor information is replaced. Karlsruhe Institute of Technology https://ror.org/04t3en479 43,4 GB application/x-tar